PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS Vulnerabilities

No description provided by source. !-- PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities Vendor: PilotGroup Ltd Product web page: http://www.elmspro.com Affected version: DEC200701 Summary: eLMS Pro solution is an outstanding and yet simple Learning Management system. Our...

PG eLMS Pro vDEC_2007_01 Multiple Blind SQL Injection Vulnerabilities

No description provided by source. PG eLMS Pro vDEC200701 Multiple Blind SQL Injection Vulnerabilities Vendor: PilotGroup Ltd Product web page: http://www.elmspro.com Affected version: DEC200701 Summary: eLMS Pro solution is an outstanding and yet simple Learning Management system. Our product is...

PG eLMS Pro DEC_2007_01 Cross Site Scripting

PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities function xss1document.forms"xss".submit; form ac...

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS

Exploit for php platform in category web applications PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities body bgcolo...

CVE-2010-2355

The CVE-2010-2355 entry describes a Cross-site scripting (XSS) vulnerability in error.php of Pilot Group (PG) eLMS Pro. The flaw allows remote attackers to inject arbitrary web script or HTML via the message parameter, potentially affecting any user who views the compromised page. The NVD details...

CVE-2010-2354: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to execute arbitrary SQL commands via the courseid parameter...

CVE-2010-2355: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in error.php in Pilot Group PG eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-2356: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the courseid parameter...